From: Vladis Dronov <vdronov(a)redhat.com>
Revert "Merge branch 'ec_fips' into 'os-build'"
We need to revert the merge request !1150 and make CONFIG_CRYPTO_ECDH
and CONFIG_CRYPTO_ECDSA back to =m. Current =y setting prevents a kernel
booting in FIPS mode. This blocks some processes, see bz1915290#c23. This
is an upstream issue and we need this revert until a proposed upstream
solution is fully tested.
Bugzilla:
https://bugzilla.redhat.com/show_bug.cgi?id=1947240
Link:
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1150
Signed-off-by: Vladis Dronov <vdronov(a)redhat.com>
diff --git a/redhat/configs/common/generic/CONFIG_CRYPTO_ECDH
b/redhat/configs/common/generic/CONFIG_CRYPTO_ECDH
index blahblah..blahblah 100644
--- a/redhat/configs/common/generic/CONFIG_CRYPTO_ECDH
+++ b/redhat/configs/common/generic/CONFIG_CRYPTO_ECDH
@@ -1 +1 @@
-CONFIG_CRYPTO_ECDH=y
+CONFIG_CRYPTO_ECDH=m
diff --git a/redhat/configs/common/generic/CONFIG_CRYPTO_ECDSA
b/redhat/configs/common/generic/CONFIG_CRYPTO_ECDSA
index blahblah..blahblah 100644
--- a/redhat/configs/common/generic/CONFIG_CRYPTO_ECDSA
+++ b/redhat/configs/common/generic/CONFIG_CRYPTO_ECDSA
@@ -1 +1 @@
-CONFIG_CRYPTO_ECDSA=y
+CONFIG_CRYPTO_ECDSA=m
--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1189